Reply to thread

Message

<blockquote data-quote="MacInWin" data-source="post: 1884183" data-attributes="member: 396914">Not sure of the logic of that last paragraph. You could do the same thing with an Intel Mac and any internal drive, even the ones that were soldered to the logic board. It makes no sense to me to deliberately stop a boot that way. Apple created the capability for a firmware password to prevent that kind of gambit on Intel systems. Apple says to achieve the same thing in an M1 Mac, use FileVault. That said, I do understand that the problem still exists that if the reason you need to boot from external is that the storage on the M1 has failed somehow, it won't boot. There is a bit of code on the SoC storage that MUST be there, even if you try to boot from an external. So the old reason for an external bootable that you could recover from a drive failure and be going again still won't work in the M1 machine. And it's speculative, but I wonder if FileVault protects that required boot information on the M1 storage? If so, you can protect yourself from someone doing what that author suggested by using FileVault on an M1 system.</blockquote>

[QUOTE="MacInWin, post: 1884183, member: 396914"] Not sure of the logic of that last paragraph. You could do the same thing with an Intel Mac and any internal drive, even the ones that were soldered to the logic board. It makes no sense to me to deliberately stop a boot that way. Apple created the capability for a firmware password to prevent that kind of gambit on Intel systems. Apple says to achieve the same thing in an M1 Mac, use FileVault. That said, I do understand that the problem still exists that if the reason you need to boot from external is that the storage on the M1 has failed somehow, it won't boot. There is a bit of code on the SoC storage that MUST be there, even if you try to boot from an external. So the old reason for an external bootable that you could recover from a drive failure and be going again still won't work in the M1 machine. And it's speculative, but I wonder if FileVault protects that required boot information on the M1 storage? If so, you can protect yourself from someone doing what that author suggested by using FileVault on an M1 system. [/QUOTE]

Verification

Name this item. 🍎